General

  • Target

    23c411b08f12615f0eefa09ebd27d822.bin

  • Size

    594KB

  • MD5

    b974d517dbdb69bc1c65f9e750ac3b38

  • SHA1

    06257cfbeff1ea7f1cd2eae6aaaa281abbe5cc6f

  • SHA256

    c220c00ee5e215e2ee172c7c66a808076e567ca44fccb14cc230f44b875b7bef

  • SHA512

    ca472b588288dda829cd299503137e0f813a29eca354c196281228047f25d9dd5ba4aec9e9787290b783b50582c7bda1572b389db59f67bbd71357e69ea80e89

  • SSDEEP

    12288:fQKQ5gwTwizTej6gKOPa1SZGxsPGyn1ZUOHmQgibOMas:fQKQZTU4SMxsPGybmzinas

Score
10/10

Malware Config

Signatures

  • DCRat payload 1 IoCs

    Detects payload of DCRat, commonly dropped by NSIS installers.

  • Dcrat family
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • 23c411b08f12615f0eefa09ebd27d822.bin
    .zip

    Password: infected

  • 534a9bfaa8222622d1a5f3513c9a6aa4ed11f0a9b49b485b11b7c50dae305984.exe
    .exe windows:5 windows x86 arch:x86

    Password: infected

    fcf1390e9ce472c7270447fc5c61a0c1


    Headers

    Imports

    Sections